Privacy Policy

Last Updated: March 4, 2026

Effective Date: March 4, 2026

Scheduler by Medspur ("we," "us," or "our") is operated by Allen Lewis. This Privacy Policy describes how we collect, use, and protect your personal information when you use our healthcare scheduling platform ("Service").

1. Information We Collect

We collect the following types of information:

Account Information: Name, email address, phone number, and password (stored in hashed form).
Scheduling Data: Shift assignments, time-off requests, swap requests, and schedule preferences.
Usage Data: Login timestamps, session information, and IP addresses for security and audit purposes.
Profile Information: Optional profile picture you choose to upload.

2. How We Use Your Information

We use your information to:

Provide and maintain the scheduling platform.
Authenticate your identity and manage your account.
Generate and manage staff schedules.
Send notifications related to schedule changes, shift assignments, and swap requests.
Ensure fair scheduling distribution through statistical tracking.
Maintain security and prevent unauthorized access.

3. Data Storage and Security

Your data is stored on secure servers hosted by DigitalOcean. We implement industry-standard security measures including:

Encrypted passwords (hashed, never stored in plain text).
Session-based authentication with secure tokens.
HTTPS encryption for all data transmission.
Regular security monitoring and updates.

4. Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We do not share your data with third parties except:

When required by law or legal process.
To protect the rights, property, or safety of our users or the public.
With infrastructure providers (e.g., hosting) necessary to operate the Service, under strict confidentiality.

5. Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct your personal information through your account settings.
Deletion: Request deletion of your account and associated data by contacting us.
Data Portability: Request your data in a portable format.

6. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

7. International Users (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including access, rectification, erasure, and data portability. Our legal basis for processing is your consent and legitimate interest in providing the Service.

8. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal information from a person under 18, we will delete that information promptly.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date and notify you through the Service. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Allen Lewis
Email: allen@boomspur.com